CLAIM AMENDMENTS 



Claim Amendment Summary 
Claims pending 

• Before this Amendment: Claims 1-5, 7-15, 17-21, 23-28, 30-31, 33, 
35-37, and 39-48. 

• After this Amendment: Claims 1-5, 7-8, 10-15, 19-21, 25-28, 30-31, 
33, 35-37, and 40-43. 

Non-Elected, Canceled, or Withdrawn claims herein: Claims 9, 17- 
18, 23-24, 39 and 44-48. 

Amended claims: Claims 1, 10, 19, 26, 31, 33, 35 and 37. 
New claims: None. 



Claims: 

1. (Currently Amended) A method for updating a filter engine 
opcode tree, comprising the following steps: 

(a) compiling a new query to derive a series of opcode objects; 

(b) traversing the opcode tree according to the series of opcode objects 
until an opcode object is encountered that is not included in the opcode tree, 
opcode objects being represented in the opcode tree as opcode nodes; and 
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(c) adding new opcode tree opcode nodes to correspond to the 
encountered opcode object and subsequent opcode objects in the series of 
opcode objects; 

(d) updating a branch node in the opcode tree to add a reference to the 
new opcode nodes, the branch node being referenced from a parent opcode 
node that corresponds to a last opcode object from the series of opcode objects 
that was found in the traversal of the opcode tree; [[and]] 

(e) implementing an optimized branch node that includes an optimized 
indexed lookup procedure, wherein the indexed l ookup procedure is configured 
to return a set of (key, va l ue) pairs, a sing l e (key, va l ue) pair corresponding to 
one branch the optimized lookup procedure comprises an interval tree function 
to optimize numeric interval queries; and 

(0 restoring the optimized branch node to a generic branch node when the 
optimized branch node is no longer more efficient than the generic branch code . 



2. (Original) The method as recited in claim 1, wherein one or more 
of the steps are performed dynamically at runtime. 

3. (Original) The method as recited in claim 1, further comprising 
performing steps (b) and (c) in a component of the filter engine. 
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4. (Original) The method as recited in claim 1, further comprising 
executing the opcode tree against an input to evaluate the new query and one or 
more other queries against the input. 



5. (Original) The method as recited in claiml, further comprising: 
receiving a request to remove a first query from the opcode tree; 
identifying one or more opcode nodes in the opcode tree that correspond 

to the first query; 

removing any identified opcode node that does not correspond to a second 

query. 

6. (Canceled) 

7. (Previously Presented) The method as recited in claim 1, the 
branch node further comprising updating the branch node to include an indexed 
lookup routine that references several dependent opcode nodes that perform a 
similar function. 
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8. (Original) The method as recited in claim 7, further comprising 
analyzing opcode nodes that depend from the branch node and including the 
indexed lookup routine only if including the indexed lookup routine provides 
more efficient processing of the dependent nodes that a generic branch node 
processing routine. 

9. (Canceled) 

10. (Currently Amended) A filter engine stored on one or more 
computer storage media computer readable media, in □ physica l embodiment , 
comprising: 

a filter table that includes a plurality of queries, at least two of the queries 
including a common prefix; 

a compiler configured to compile each query into a series of opcode 
blocks; 

an opcode tree stored in memory and including opcode nodes that each 
correspond to an opcode block such that executing the opcode nodes evaluates 
the plurality of queries, at least one opcode node corresponding to an opcode 
block included in the common prefix; 
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an opcode merger configured to merge a new query to the opcode tree by 
adding at least one opcode node that corresponds to the new query to the 
opcode tree, 

wherein, when an opcode node will depend from a branch node when 
added to the opcode tree, identifying one or more child opcode nodes that 
depend from the branch opcode; and 

implementing an optimized branch node that includes an optimized 
indexed lookup procedure if such implementation would increase branch 
processing efficiency and referencing the opcode node from the optimized 
branch node, wherein the indexed l ookup procedure is configured to return □ set 
of (key, va l ue) pairs, a sing l e (key, va l ue) pair corresponding to one branch; 

the optimized indexed lookup procedure further comprises an 

interval tree function to optimize numeric interval queries; 

the opcode merger is further configured to restore an optimized 

branch node to a generic branch node when the optimized branch node is 

no longer more efficient that the generic branch node . 



11. (Original) The filter engine as recited in claim 10, the opcode 
merger further configured to traverse the opcode tree to determine if an opcode 
node corresponding to the new query already exists in the opcode tree and add 
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new opcode nodes that correspond to query opcode blocks that are not already 
included in the opcode tree. 

12. (Original) The filter engine as recited in claim 10, wherein opcode 
nodes corresponding to opcode blocks included in a common prefix are 
represented as a shared segment in the opcode tree. 

13. (Original) The filter engine as recited in claim 10, wherein queries 
are merged into the opcode tree dynamically at runtime. 

14. (Original) The filter engine as recited in claim 10, further 
comprising XPath queries in the plurality of queries. 

15. (Original) The filter engine as recited in claim 10, the compiler 
being further configured to create opcode objects that are configured to merge 
themselves into an appropriate location in the opcode tree. 

16. (Canceled) 

17. (Canceled) 
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18. (Canceled) 



19. (Currently Amended) A compiler stored on one or more computer 
storage media computer readab l e medio, in o physica l embodiment , containing 
computer-executable instructions for performing the following steps: 

receiving a query to be added to an opcode tree that represents a plurality 
of queries, at least two of which include similar prefixes; compiling a query to 
produce one or more opcode objects that are each configured to merge into the 
opcode tree as an opcode node by determining an appropriate location in the 
tree to merge, and merging into the tree in accordance with a node context of 
the appropriate location; 

determining a function that the opcode object performs; 

determining if a branch node that will reference the opcode node 
corresponding to the opcode object also references other opcode nodes that 
perform a similar function; and 

implementing an optimized branching function in the branch node 
including an optimized lookup procedure if the branch node can be optimized to 
more efficiently process the opcode nodes that it references, wherein the 
indexed l ookup procedure is configured to return a set of (key, va l ue) pairs, a 
sing l e (key, va l ue) pair corresponding to one branch the optimized lookup 
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procedure comprises an interval tree function to optimize numeric interval 
queries: and 

restoring the optimized branch node to a generic branch node when the 
optimized branch node is no longer more efficient than the generic branch code . 

20. (Original) The compiler as recited in claim 19, further comprising 
producing opcode objects that are further configured to merge into the opcode 
tree only if an identical opcode object corresponding to a similar query prefix is 
not already included in the opcode tree 



21. (Original) The compiler as recited in claim 19, wherein a query 
further comprises an XPath query. 



22. (Canceled) 



23. (Canceled) 



24. (Canceled) 



25. (Original) The compiler as recited in claim 19, wherein: 
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the compiler is configured to receive the query and generate the opcode at 
runtime; and 

the opcode node is configured to merge itself into the opcode tree at 
runtime. 



26. (Currently Amended) An opcode object stored on one or more 
computer storage media computer readable medio, in o physica l embodiment , 
including computer-executable instructions that, when executed on a computer, 
perform the following steps: 

determining an appropriate location to merge itself as a new opcode node 
in an opcode tree when a query from which the opcode object is derived is 
added to a filter table represented by the opcode tree including opcode nodes 
that, when executed, evaluate the queries; 

evaluating a node context of the location to which the new opcode node 
will be added; and 

merging itself into the opcode tree by adding and/or modifying references 
from an opcode node or a branch node to the new opcode node, 

wherein evaluating a node context further comprises: 

identifying a generic branch opcode from which the new node will depend; 

identifying one or more other nodes that depend from the generic branch 
opcode that include a similar expression as the new node; and 
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if a sufficient number of the one or more other nodes exists, modifying the 
generic branch opcode to an optimized branch opcode that includes an indexed 
lookup procedure that is optimized to more efficiently process the similar 
expressions, wherein the indexed l ookup procedure is configured to return a set 
of (key, va l ue) pairs, a sing l e (key, value) pair corresponding to one branch the 
optimized lookup procedure comprises an interval tree function to optimize 
numeric interval queries: and 

restoring the optimized branch node to a generic branch node when the 
optimized branch node is no longer more efficient than the generic branch code . 

27. (Original) The opcode block as recited in claim 26, further 
configured to perform the recited steps dynamically at runtime. 



28. (Original) The opcode block as recited in claim 26, further 
configured to perform the recited steps within a .NET environment. 



29. (Canceled) 



30. (Original) The opcode block as recited in claim 26, wherein 
evaluating a node context further comprises: 
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identifying an optimized branch opcode from which the new node will 
depend; 

identifying one or more other nodes that depend from the optimized 
branch opcode that include a similar expression as the new node; and 

if minimum threshold number of the one or more other nodes is not met, 
modifying the optimized branch opcode to a generic branch opcode that can 
process the number of one or more other nodes more efficiently than the 
optimized branch opcode can. 

31. (Currently Amended) A method for removing a first query from 
an opcode tree, comprising: 

identifying an opcode tree that includes opcode nodes representing 
multiple queries such that when the opcode tree is executed, each of the 
multiple queries is evaluated; 

identifying one or more opcode nodes that correspond to the first query; 

removing any opcode node that does not correspond to a second query; 

and 

modifying a branch node that references an opcode node that is removed 
from the opcode tree, 

wherein the modifying further comprises removing an optimized lookup 
function that includes an indexed lookup routine from the branch node if 
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removing the branch node renders the lookup function less efficient than a direct 
comparison function, wherein the indexed l ookup routine is configured to return 
a set of (key, va l ue) pairs, □ sing l e (key, va l ue) pair corresponding to one branch 
the optimized lookup procedure comprises an interval tree function to optimize 
numeric interval queries . 



32. (Canceled) 

33. (Currently Amended) The method as recited in claim [[32]] 31, 
wherein the modifying further comprises removing the branch node if the branch 
node references only one other opcode node other than the opcode node to be 
removed. 



34. (Canceled) 



35. (Currently Amended) The method as recited in claim [[32]] 31, 
wherein the modifying further comprises implementing an optimized processing 
function in the branch node if the removal of the branch node creates a context 
in which the optimized processing function would increase efficiency of the 
branch node processing. 
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36. (Original) The method as recited in claim 35, wherein the 
optimized processing function further comprises one of the following functions: a 
hash function; an interval tree function; a function using tries. 



37. (Currently Amended) One or more computer storage media 
computer readab l e medio, in o physica l embodiment , containing computer- 
executable instructions that, when executed on a computer, perform the 
following steps: 

identifying an opcode block that corresponds to a query to be added to an 
opcode tree that represents multiple queries with a plurality of opcode nodes; 

identifying an appropriate location in an opcode tree to situate new opcode 
nodes that correspond to a sequence of opcode objects in the opcode block, the 
opcode tree including at least one shared opcode node that corresponds to at 
least two of the multiple queries; 

evaluating a location context; and 

modifying an opcode node or a branch node to incorporate a new opcode 

node, 

wherein, the evaluation step further comprises evaluating a plurality of 
dependent opcode nodes that depend from a branch node from which the new 
opcode node depend; and 
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the modifying step further comprises modifying the branch node to include 
an indexed lookup function if the dependent opcode nodes perform a similar 
function and processing the dependent opcode with the indexed lookup function 
increases the efficiency thereof, wherein the indexed l ookup function is 
configured to return □ set of (key, value) pairs, □ sing l e (key, va l ue) pair 
corresponding to one branch the optimized lookup procedure comprises an 
interval tree function to optimize numeric interval queries . 

38. (Canceled) 

39. (Canceled) 

40. (Original) The one or more computer-readable media as recited in 
claim 37, wherein the queries are XPath queries. 

41. (Original) The one or more computer-readable media as recited in 
claim 37, wherein the steps are performed by an inverse query engine. 

42. (Original) The one or more computer-readable media as recited in 
claim 37, wherein the identifying step, the evaluating step and the modifying 
step are performed by the new opcode node. 
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43. (Original) The one or more computer-readable media as recited in 
claim 37, wherein the steps are performed in a Common Language Runtime 
(CLR) environment. 

44 - 48. (Canceled) 
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